Warning: Permanently added '10.128.1.135' (ECDSA) to the list of known hosts. 2023/04/23 03:05:40 ignoring optional flag "sandboxArg"="0" 2023/04/23 03:05:40 parsed 1 programs 2023/04/23 03:05:40 executed programs: 0 [ 37.524884][ T22] kauditd_printk_skb: 64 callbacks suppressed [ 37.524893][ T22] audit: type=1400 audit(1682219140.870:147): avc: denied { mounton } for pid=333 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 37.557031][ T22] audit: type=1400 audit(1682219140.870:148): avc: denied { mount } for pid=333 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 37.609557][ T22] audit: type=1400 audit(1682219140.900:149): avc: denied { module_request } for pid=339 comm="syz-executor.0" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 37.683679][ T339] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.690910][ T339] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.698504][ T22] audit: type=1400 audit(1682219141.050:150): avc: denied { read } for pid=137 comm="syslogd" name="log" dev="sda1" ino=1125 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 37.701907][ T339] device bridge_slave_0 entered promiscuous mode [ 37.759191][ T339] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.766275][ T339] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.773740][ T339] device bridge_slave_1 entered promiscuous mode [ 37.835166][ T346] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.842308][ T346] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.849981][ T346] device bridge_slave_0 entered promiscuous mode [ 37.859312][ T346] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.866600][ T346] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.874281][ T346] device bridge_slave_1 entered promiscuous mode [ 37.956926][ T349] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.964125][ T349] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.971466][ T349] device bridge_slave_0 entered promiscuous mode [ 37.981735][ T349] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.988939][ T349] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.996415][ T349] device bridge_slave_1 entered promiscuous mode [ 38.003147][ T347] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.010810][ T347] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.018237][ T347] device bridge_slave_0 entered promiscuous mode [ 38.025501][ T347] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.032579][ T347] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.040014][ T347] device bridge_slave_1 entered promiscuous mode [ 38.079937][ T350] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.087111][ T350] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.094539][ T350] device bridge_slave_0 entered promiscuous mode [ 38.105153][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.112290][ T350] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.119695][ T350] device bridge_slave_1 entered promiscuous mode [ 38.145344][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.153227][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.160650][ T354] device bridge_slave_0 entered promiscuous mode [ 38.185703][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.192774][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.200405][ T354] device bridge_slave_1 entered promiscuous mode [ 38.353329][ T339] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.360468][ T339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.367983][ T339] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.375036][ T339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.414451][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.421493][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.428770][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.435868][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.454730][ T346] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.461864][ T346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.469351][ T346] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.480908][ T346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.493902][ T347] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.501049][ T347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.508374][ T347] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.515389][ T347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.526222][ T101] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.534134][ T101] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.541516][ T101] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.549073][ T101] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.556932][ T101] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.564325][ T101] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.572080][ T101] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.579739][ T101] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.588742][ T101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.596469][ T101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.626974][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.635856][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.645239][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.652270][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.667655][ T101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.676083][ T101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.684641][ T101] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.691645][ T101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.726414][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.734113][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.741579][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.750338][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.759263][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.766497][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.774097][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.782449][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.790577][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.797624][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.805656][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.814266][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.822378][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.830635][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.838938][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.853773][ T101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.867894][ T101] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.885568][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.893597][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.900941][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.909579][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.917912][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.924936][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.932439][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.940930][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.949354][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.956726][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.982755][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.990262][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.998871][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.008254][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.016794][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.023931][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.031326][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.039936][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.048194][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.055579][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.070680][ T101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.079073][ T101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.087764][ T101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.095628][ T101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.134429][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.143080][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.151001][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.159892][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.169072][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.177891][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.186533][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.193643][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.201202][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.209976][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.218443][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.225485][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.232853][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.241227][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.249592][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.257715][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.265971][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.274836][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.302451][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.310805][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.319848][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.328130][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.336460][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.344884][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.353406][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.362031][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.370572][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.394418][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.402922][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.410801][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.419806][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.428508][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.436912][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.445759][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.452781][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.460220][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.469507][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.477945][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.485001][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.492612][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.500929][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.524533][ T22] audit: type=1400 audit(1682219142.870:151): avc: denied { mount } for pid=350 comm="syz-executor.5" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 39.548132][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.557775][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.565352][ T22] audit: type=1400 audit(1682219142.910:152): avc: denied { mounton } for pid=373 comm="syz-executor.5" path="/root/syzkaller-testdir1808996664/syzkaller.raVgBb/0/file0" dev="sda1" ino=1158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 39.566349][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.601486][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.610275][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.639973][ T101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.648673][ T101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.657374][ T101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.665765][ T101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.674376][ T101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.683082][ T101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.691329][ T101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.700013][ T101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.708376][ T101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.717077][ T101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.733020][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.740870][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.749183][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.757483][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.781957][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.790156][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.799562][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.807610][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.828034][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.836446][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.845201][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.853809][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.862961][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.872140][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.880575][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.889595][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.898346][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.906864][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.915344][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.923797][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.932246][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.940551][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.978170][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.007630][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.016614][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.025362][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.398152][ T22] audit: type=1400 audit(1682219143.740:153): avc: denied { unmount } for pid=350 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 2023/04/23 03:05:45 executed programs: 22 [ 44.406524][ T550] ================================================================== [ 44.414646][ T550] BUG: KASAN: use-after-free in fuse_copy_one+0x1c0/0x3a0 [ 44.421744][ T550] Read of size 256 at addr ffff8881d6092010 by task syz-executor.4/550 [ 44.430033][ T550] [ 44.432339][ T550] CPU: 1 PID: 550 Comm: syz-executor.4 Not tainted 5.4.233-syzkaller-00011-g0108362f3305 #0 [ 44.442468][ T550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 44.452756][ T550] Call Trace: [ 44.456026][ T550] dump_stack+0x1d8/0x241 [ 44.460339][ T550] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 44.466207][ T550] ? printk+0xd1/0x111 [ 44.470264][ T550] ? fuse_copy_one+0x1c0/0x3a0 [ 44.475098][ T550] ? vprintk_emit+0x436/0x4a0 [ 44.479758][ T550] ? fuse_copy_one+0x1c0/0x3a0 [ 44.484626][ T550] print_address_description+0x8c/0x600 [ 44.490233][ T550] ? panic+0x768/0x768 [ 44.494280][ T550] ? _raw_spin_lock+0xa4/0x1b0 [ 44.499017][ T550] ? fuse_copy_one+0x1c0/0x3a0 [ 44.503752][ T550] __kasan_report+0xf3/0x120 [ 44.508350][ T550] ? fuse_copy_one+0x1c0/0x3a0 [ 44.513086][ T550] ? fuse_copy_one+0x1c0/0x3a0 [ 44.518007][ T550] kasan_report+0x30/0x60 [ 44.522308][ T550] check_memory_region+0x272/0x280 [ 44.527396][ T550] memcpy+0x25/0x50 [ 44.531191][ T550] fuse_copy_one+0x1c0/0x3a0 [ 44.535878][ T550] fuse_copy_args+0x339/0x410 [ 44.540557][ T550] fuse_dev_do_read+0xc1b/0x1190 [ 44.545475][ T550] ? queue_interrupt+0x310/0x310 [ 44.550417][ T550] fuse_dev_read+0x179/0x220 [ 44.555100][ T550] ? fuse_dev_release+0x5c0/0x5c0 [ 44.560111][ T550] ? do_futex+0x13c1/0x19f0 [ 44.564603][ T550] ? iov_iter_init+0x82/0x160 [ 44.569262][ T550] __vfs_read+0x5cd/0x730 [ 44.573598][ T550] ? rw_verify_area+0x360/0x360 [ 44.578450][ T550] ? __fsnotify_update_child_dentry_flags+0x290/0x290 [ 44.585571][ T550] ? security_file_permission+0x1dc/0x2f0 [ 44.591507][ T550] vfs_read+0x148/0x360 [ 44.595788][ T550] ksys_read+0x199/0x2c0 [ 44.600157][ T550] ? vfs_write+0x4e0/0x4e0 [ 44.604736][ T550] do_syscall_64+0xca/0x1c0 [ 44.609316][ T550] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 44.615202][ T550] [ 44.617519][ T550] Allocated by task 536: [ 44.621831][ T550] __kasan_kmalloc+0x130/0x1d0 [ 44.626582][ T550] __d_alloc+0xae/0x6a0 [ 44.630735][ T550] d_alloc_parallel+0xe7/0x1310 [ 44.635577][ T550] __lookup_slow+0x156/0x460 [ 44.640183][ T550] lookup_slow+0x53/0x70 [ 44.644652][ T550] walk_component+0x2dc/0x590 [ 44.649301][ T550] path_lookupat+0x182/0x3f0 [ 44.653860][ T550] filename_lookup+0x253/0x6e0 [ 44.658593][ T550] do_mount+0x135/0xdd0 [ 44.663435][ T550] ksys_mount+0xc2/0xf0 [ 44.667742][ T550] __x64_sys_mount+0xb1/0xc0 [ 44.672338][ T550] do_syscall_64+0xca/0x1c0 [ 44.676839][ T550] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 44.682725][ T550] [ 44.685030][ T550] Freed by task 9: [ 44.688738][ T550] __kasan_slab_free+0x178/0x230 [ 44.693737][ T550] kfree+0xeb/0x320 [ 44.697611][ T550] rcu_do_batch+0x451/0xa00 [ 44.702085][ T550] rcu_core+0x4c8/0xcb0 [ 44.706219][ T550] __do_softirq+0x22e/0x630 [ 44.710775][ T550] [ 44.713123][ T550] The buggy address belongs to the object at ffff8881d6092000 [ 44.713123][ T550] which belongs to the cache kmalloc-rcl-512 of size 512 [ 44.727898][ T550] The buggy address is located 16 bytes inside of [ 44.727898][ T550] 512-byte region [ffff8881d6092000, ffff8881d6092200) [ 44.741230][ T550] The buggy address belongs to the page: [ 44.746872][ T550] page:ffffea0007582400 refcount:1 mapcount:0 mapping:ffff8881f5c0db80 index:0x0 compound_mapcount: 0 [ 44.758154][ T550] flags: 0x8000000000010200(slab|head) [ 44.763589][ T550] raw: 8000000000010200 dead000000000100 dead000000000122 ffff8881f5c0db80 [ 44.772152][ T550] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 44.780708][ T550] page dumped because: kasan: bad access detected [ 44.787090][ T550] page_owner tracks the page as allocated [ 44.792786][ T550] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0x1d20d0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE) [ 44.811714][ T550] prep_new_page+0x18f/0x370 [ 44.816284][ T550] get_page_from_freelist+0x2ce8/0x2d70 [ 44.821894][ T550] __alloc_pages_nodemask+0x393/0x840 [ 44.827237][ T550] alloc_slab_page+0x39/0x3c0 [ 44.831972][ T550] new_slab+0x97/0x440 [ 44.836028][ T550] ___slab_alloc+0x2fe/0x490 [ 44.840588][ T550] __slab_alloc+0x5a/0x90 [ 44.844992][ T550] __kmalloc+0x196/0x2b0 [ 44.849416][ T550] __d_alloc+0xae/0x6a0 [ 44.853743][ T550] d_alloc_parallel+0xe7/0x1310 [ 44.858571][ T550] __lookup_slow+0x156/0x460 [ 44.863176][ T550] lookup_slow+0x53/0x70 [ 44.867494][ T550] walk_component+0x2dc/0x590 [ 44.872230][ T550] path_lookupat+0x182/0x3f0 [ 44.876797][ T550] filename_lookup+0x253/0x6e0 [ 44.881659][ T550] do_mount+0x135/0xdd0 [ 44.885867][ T550] page_owner free stack trace missing [ 44.891295][ T550] [ 44.893625][ T550] Memory state around the buggy address: [ 44.899502][ T550] ffff8881d6091f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 44.907621][ T550] ffff8881d6091f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 44.916017][ T550] >ffff8881d6092000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 44.924269][ T550] ^ [ 44.928913][ T550] ffff8881d6092080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 44.937303][ T550] ffff8881d6092100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 44.945333][ T550] ================================================================== [ 44.953454][ T550] Disabling lock debugging due to kernel taint 2023/04/23 03:05:50 executed programs: 56 2023/04/23 03:05:56 executed programs: 92